This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e342e3138312e302f32342d3234203d3e203532323333.roa
File:                     3139302e342e3138312e302f32342d3234203d3e203532323333.roa (raw, json)
Hash identifier:          oUP4hJbCPBqMq8I8gDAZiuaI9puc+qzb002ei0UBMwU=
Subject key identifier:   20:6B:20:59:0F:70:40:53:A4:E4:9A:5D:E4:60:2B:09:82:3B:B2:C3
Certificate issuer:       /CN=237D63DAE61C3211909C89DEBD463B26F873E44B
Certificate serial:       3C45AB0013C2030A76F6BB8D093E10D49F5BD256
Authority key identifier: 23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e342e3138312e302f32342d3234203d3e203532323333.roa
Signing time:             Tue 06 Jan 2026 19:43:13 +0000
ROA not before:           Tue 06 Jan 2026 19:38:13 +0000
ROA not after:            Tue 05 Jan 2027 19:43:13 +0000
asID:                     52233
IP address blocks:        190.4.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 Jan 2026 10:37:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:45:ab:00:13:c2:03:0a:76:f6:bb:8d:09:3e:10:d4:9f:5b:d2:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=237D63DAE61C3211909C89DEBD463B26F873E44B
        Validity
            Not Before: Jan  6 19:38:13 2026 GMT
            Not After : Jan  5 19:43:13 2027 GMT
        Subject: CN=206B20590F704053A4E49A5DE4602B09823BB2C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b1:5c:46:07:77:11:26:39:32:cb:74:3e:7e:
                    e2:d6:4a:07:00:41:28:a1:4f:27:82:56:03:84:3f:
                    f1:90:2c:5c:3e:b2:16:c1:f3:fa:dd:ef:a0:90:fd:
                    2e:27:f9:e4:ed:e9:c7:ba:99:f6:c3:1f:0a:5e:69:
                    79:4b:99:f2:ef:8d:6b:1e:b7:0c:e5:c7:e1:ce:65:
                    50:a0:3e:e6:25:80:c5:f1:38:00:4a:61:41:85:79:
                    59:77:2c:57:82:1d:6d:5a:ee:40:05:93:86:45:4a:
                    4b:2d:13:19:92:15:5d:7e:88:28:54:2d:99:5a:bf:
                    d7:8d:b2:3e:6c:fc:06:83:72:c2:5b:6b:74:f8:1a:
                    1e:60:a3:5c:a7:e8:3e:28:97:7d:a5:4c:82:3e:70:
                    be:bf:9a:81:b1:6a:c9:78:17:29:b4:35:cd:02:8b:
                    17:99:5c:31:5a:cd:c2:a7:09:65:43:fa:fb:fb:ce:
                    5d:c3:60:4b:16:84:8b:af:54:24:34:42:5a:53:2a:
                    3c:3a:66:d0:57:ba:77:c1:20:87:5b:05:28:a2:3c:
                    cf:df:67:c2:4d:7c:15:71:c1:1b:10:a2:02:82:0f:
                    cc:0d:dc:e2:85:f4:9f:af:c5:cd:b7:01:27:de:7f:
                    6b:a5:76:38:da:b8:63:50:0c:d1:e3:cc:c8:f3:32:
                    66:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:6B:20:59:0F:70:40:53:A4:E4:9A:5D:E4:60:2B:09:82:3B:B2:C3
            X509v3 Authority Key Identifier:
                keyid:23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e342e3138312e302f32342d3234203d3e203532323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.4.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:cc:f9:26:1d:5e:b2:62:27:0f:23:3a:00:ee:e5:ca:93:b9:
         75:c7:c1:99:d8:c6:a1:db:9c:fd:04:9c:aa:ba:22:42:5d:a2:
         87:7a:63:d4:a7:c5:d8:39:c8:43:3c:de:5b:d7:9f:7c:3a:ba:
         f0:3b:bc:d6:82:d1:f0:68:a2:d7:9b:66:fd:f1:44:78:55:57:
         02:9b:6e:b0:4d:b3:36:f4:68:1b:62:c7:e4:5a:e2:e8:05:9d:
         a3:55:50:b5:ce:24:94:b9:ec:d6:c7:fa:66:87:18:2a:4e:40:
         33:68:aa:21:5d:8b:e8:6e:8c:33:ed:2f:60:56:35:13:66:70:
         8d:84:17:c4:f1:64:79:02:59:fa:1a:ee:3e:58:7b:34:ca:56:
         79:50:23:2c:1e:93:f6:3a:0a:65:6d:b8:fd:12:c7:d5:a3:01:
         53:ac:de:41:ce:df:7d:4c:05:33:1f:c0:ed:e5:14:aa:29:38:
         0d:74:27:f9:a6:f4:68:db:25:c3:91:56:40:f0:fb:3e:cc:23:
         f2:f9:42:ef:6a:42:6e:ff:9f:ae:0e:97:93:f1:03:91:22:cd:
         51:e7:9f:8c:d9:e0:ed:ae:49:08:f4:26:17:17:05:7a:e9:71:
         5e:ad:e7:2e:14:92:f9:4a:da:aa:b1:95:ae:38:11:3c:24:8f:
         1d:3e:27:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 17:43:46 2026 by rpki-client